19.to
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 19.to
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 000.19.to | 2026-06-22 12:36:40.667 | |
| 002.19.to | 2026-07-21 15:56:06.425 | |
| 005.19.to | 1970-01-01 00:00:00.000 | |
| 009.19.to | 2026-06-15 14:24:53.999 | |
| 01.10.19.to | 2026-06-15 15:21:26.726 | |
| 010.19.to | 1970-01-01 00:00:00.000 | |
| 013.19.to | 1970-01-01 00:00:00.000 | |
| 018.19.to | 2026-07-21 17:04:22.645 | |
| 020.19.to | 1970-01-01 00:00:00.000 | |
| 021.19.to | 2026-06-17 02:25:04.407 | |
| 037.19.to | 1970-01-01 00:00:00.000 | |
| 038.19.to | 1970-01-01 00:00:00.000 | |
| 042.19.to | 1970-01-01 00:00:00.000 | |
| 048.19.to | 1970-01-01 00:00:00.000 | |
| 050.19.to | 1970-01-01 00:00:00.000 | |
| 052.19.to | 1970-01-01 00:00:00.000 | |
| 053.19.to | 2026-06-15 15:40:34.902 | |
| 054.19.to | 1970-01-01 00:00:00.000 | |
| 056.19.to | 1970-01-01 00:00:00.000 | |
| 059.19.to | 2026-06-17 11:19:04.151 | |
| 060.19.to | 2026-06-15 22:07:56.915 | |
| 062.19.to | 1970-01-01 00:00:00.000 | |
| 064.19.to | 1970-01-01 00:00:00.000 | |
| 065.19.to | 1970-01-01 00:00:00.000 | |
| 066.19.to | 1970-01-01 00:00:00.000 | |
| 067.19.to | 1970-01-01 00:00:00.000 | |
| 068.19.to | 1970-01-01 00:00:00.000 | |
| 069.19.to | 2026-06-21 22:20:06.380 | |
| 073.19.to | 1970-01-01 00:00:00.000 | |
| 077.19.to | 1970-01-01 00:00:00.000 | |
| 078.19.to | 1970-01-01 00:00:00.000 | |
| 083.19.to | 2026-06-18 09:11:14.628 | |
| 085.19.to | 2026-06-04 06:46:03.820 | |
| 088.19.to | 2026-06-17 05:56:20.051 | |
| 091.19.to | 1970-01-01 00:00:00.000 | |
| 092.19.to | 1970-01-01 00:00:00.000 | |
| 097.19.to | 1970-01-01 00:00:00.000 | |
| 1.1.1.5.19.to | 2026-07-16 00:53:18.925 | |
| 10.19.to | 1970-01-01 00:00:00.000 | |
| 10.psal.xxii.19.to | 1970-01-01 00:00:00.000 | |
| 108.19.to | 1970-01-01 00:00:00.000 | |
| 117.19.to | 2026-06-16 19:28:53.162 | |
| 119.19.to | 1970-01-01 00:00:00.000 | |
| 126.19.to | 1970-01-01 00:00:00.000 | |
| 128.19.to | 1970-01-01 00:00:00.000 | |
| 134.19.to | 2026-07-22 09:42:26.799 | |
| 138.19.to | 2026-06-15 17:01:41.803 | |
| 139.19.to | 1970-01-01 00:00:00.000 | |
| 14.17.18.19.to | 2026-06-03 12:45:08.720 | |
| 141.19.to | 1970-01-01 00:00:00.000 | |
| 142.19.to | 2026-06-17 11:26:19.333 | |
| 144.19.to | 1970-01-01 00:00:00.000 | |
| 155.19.to | 1970-01-01 00:00:00.000 | |
| 159.19.to | 1970-01-01 00:00:00.000 | |
| 16.19.to | 1970-01-01 00:00:00.000 | |
| 161.19.to | 1970-01-01 00:00:00.000 | |
| 163.19.to | 2026-06-19 02:46:03.321 | |
| 165.19.to | 1970-01-01 00:00:00.000 | |
| 166.19.to | 1970-01-01 00:00:00.000 | |
| 17.18.19.to | 2026-06-01 14:52:35.351 | |
| 17.19.to | 2026-06-01 14:12:43.841 | |
| 171.19.to | 2026-07-16 16:09:53.171 | |
| 18.12.19.to | 2026-06-03 20:00:18.497 | |
| 18.19.to | 1970-01-01 00:00:00.000 | |
| 18.to.19.to | 1970-01-01 00:00:00.000 | |
| 181.19.to | 1970-01-01 00:00:00.000 | |
| 182.19.to | 2026-07-19 14:26:29.379 | |
| 186.19.to | 1970-01-01 00:00:00.000 | |
| 187.19.to | 1970-01-01 00:00:00.000 | |
| 191.19.to | 1970-01-01 00:00:00.000 | |
| 192.19.to | 2026-06-15 15:37:16.032 | |
| 1922.19.to | 1970-01-01 00:00:00.000 | |
| 194.19.to | 1970-01-01 00:00:00.000 | |
| 195.19.to | 1970-01-01 00:00:00.000 | |
| 199.19.to | 2026-06-15 23:13:50.118 | |
| 20.12.19.to | 1970-01-01 00:00:00.000 | |
| 2021.2.19.to | 1970-01-01 00:00:00.000 | |
| 204.19.to | 2026-06-21 22:20:06.380 | |
| 205.19.to | 1970-01-01 00:00:00.000 | |
| 207.19.to | 2026-07-17 19:33:04.768 | |
| 208.19.to | 1970-01-01 00:00:00.000 | |
| 215.19.to | 1970-01-01 00:00:00.000 | |
| 222.19.to | 2026-06-17 03:50:29.895 | |
| 226.19.to | 1970-01-01 00:00:00.000 | |
| 229.19.to | 1970-01-01 00:00:00.000 | |
| 235.19.to | 1970-01-01 00:00:00.000 | |
| 236.19.to | 2026-05-31 19:57:51.502 | |
| 24.19.to | 2026-06-01 14:46:41.326 | |
| 240.19.to | 1970-01-01 00:00:00.000 | |
| 241.19.to | 1970-01-01 00:00:00.000 | |
| 243.19.to | 1970-01-01 00:00:00.000 | |
| 250.19.to | 1970-01-01 00:00:00.000 | |
| 255.19.to | 2026-05-31 19:21:51.482 | |
| 261.19.to | 1970-01-01 00:00:00.000 | |
| 263.19.to | 2026-06-22 11:13:51.843 | |
| 264.19.to | 2026-06-04 07:19:37.985 | |
| 272.19.to | 1970-01-01 00:00:00.000 | |
| 273.19.to | 1970-01-01 00:00:00.000 | |
| 276.19.to | 1970-01-01 00:00:00.000 | |
| 277.19.to | 2026-06-04 16:00:42.345 | |
| 278.19.to | 1970-01-01 00:00:00.000 | |
| 279.19.to | 2026-06-03 12:31:36.327 | |
| 280.19.to | 1970-01-01 00:00:00.000 | |
| 288.19.to | 1970-01-01 00:00:00.000 | |
| 29.19.to | 1970-01-01 00:00:00.000 | |
| 291.19.to | 1970-01-01 00:00:00.000 | |
| 292.19.to | 1970-01-01 00:00:00.000 | |
| 294.19.to | 1970-01-01 00:00:00.000 | |
| 299.19.to | 1970-01-01 00:00:00.000 | |
| 3.11.19.to | 2026-07-20 17:54:04.862 | |
| 301.19.to | 2026-06-17 15:42:03.402 | |
| 312.19.to | 2026-06-05 22:54:49.376 | |
| 313.19.to | 1970-01-01 00:00:00.000 | |
| 314.19.to | 1970-01-01 00:00:00.000 | |
| 317.19.to | 1970-01-01 00:00:00.000 | |
| 319.19.to | 1970-01-01 00:00:00.000 | |
| 322.19.to | 1970-01-01 00:00:00.000 | |
| 323.19.to | 2026-06-16 15:43:05.756 | |
| 327.19.to | 2026-06-03 01:57:20.444 | |
| 329.19.to | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.